Release date:
Updated on:
Affected Systems:
Linux kernel 2.6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51172
Cve id: CVE-2011-4622
Linux is the kernel of a free computer.
Linux Kernel has a local denial of service vulnerability in the implementation of create_pit_timer (). The create_pit_timer function in arch/x86/KVM/i8254.c of kvm 83 does not properly process pit irq when irqchip is unavailable, A local attacker can exploit this vulnerability to cause a kernel crash and reject legitimate users.
<* Source: Red Hat Security Response Team
Link: http://permalink.gmane.org/gmane.comp.emulators.kvm.devel/83564
*>
Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Http://www.kernel.org/